Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal data.
Last updated: January 2025
Data Controller
Univer Dealz
Via Mecenate 42, 20118 Milan, Italy
VAT: IT13295199004
Email: [email protected]
Phone: +39 02 845531
1. Information We Collect
Information You Provide
- Account Information: Name, email address, password, phone number
- Order Information: Billing and shipping addresses, payment details, order history
- Communication: Messages you send us, customer service inquiries, reviews
- Preferences: Marketing preferences, product interests
Information Collected Automatically
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, time spent, click patterns
- Cookies: Session and preference cookies (see our Cookies Policy)
2. How We Use Your Information
We use your personal data for the following purposes:
- Order Processing: To fulfill and deliver your orders, process payments, and send order updates
- Customer Service: To respond to inquiries, provide support, and handle complaints
- Account Management: To create and manage your account, authenticate your identity
- Marketing: To send promotional communications (with your consent)
- Website Improvement: To analyze usage patterns and improve our services
- Legal Compliance: To comply with legal obligations and protect our rights
- Fraud Prevention: To detect and prevent fraudulent activities
3. Legal Basis for Processing
Under GDPR, we process your data based on:
- Contract Performance: Processing necessary to fulfill our contract with you (orders, delivery)
- Legal Obligation: Processing required by law (tax records, consumer protection)
- Legitimate Interest: Processing for our legitimate business interests (fraud prevention, website improvement)
- Consent: Processing based on your explicit consent (marketing communications)
4. Data Sharing
We may share your information with:
- Service Providers: Payment processors, shipping carriers, IT service providers who help us operate our business
- Legal Authorities: When required by law or to protect our legal rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal data to third parties. All service providers are contractually bound to protect your data and use it only for specified purposes.
5. Data Retention
We retain your personal data for as long as necessary to:
- Provide our services and fulfill your orders
- Comply with legal obligations (e.g., tax records for 10 years)
- Resolve disputes and enforce our agreements
- Maintain warranty records for the warranty period plus any legal limitation period
Account data is retained while your account is active. You may request deletion at any time.
6. Your Rights (GDPR)
As an EU resident, you have the following rights:
Right of Access
Request a copy of your personal data we hold.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Request limitation of how we use your data.
Right to Data Portability
Receive your data in a portable format.
Right to Object
Object to processing based on legitimate interests or for marketing.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
7. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- SSL/TLS encryption for all data transmission
- Secure payment processing through certified payment providers
- Regular security assessments and updates
- Access controls and employee training
- Secure data storage with encryption at rest
8. International Data Transfers
Your data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. We encourage you to review this policy periodically.
11. Complaints
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with a supervisory authority. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).
Privacy Questions?
If you have questions about this Privacy Policy or how we handle your data, please contact us.
